Data Protection via Aggregation-Based Obfuscation

2. The method of claim 1, wherein the plurality of sensitive data records in the sensitive database corresponds to a plurality of individuals, and wherein the grouping identifier comprises a census block to which each of the plurality of individuals belongs.

3. The method of claim 2, wherein aggregating the plurality of sensitive data records into aggregation groups is performed based on the census block.

7. The method of claim 3, wherein aggregating sensitive data records for the individuals into aggregation groups comprises imputing nation-wide statistics to sensitive data records in the sensitive database that are not associated with a valid census block code.

9. The system of claim 8, wherein the plurality of sensitive data records in the sensitive database corresponds to a plurality of individuals, wherein the grouping identifier comprises a census block that each of the plurality of individuals belongs to, and wherein aggregating the plurality of sensitive data records into aggregation groups is performed based on the census block.

10. The system of claim 9, wherein aggregating the plurality of sensitive data records into aggregation groups comprises aggregating sensitive data records corresponding to the individuals in a census block into an aggregation group based on a number of individuals belonging to the census block is equal to or exceeding a threshold.

12. The system of claim 11, wherein the geographical unit comprises at least one of a census tract, a county, or a state.

13. The system of claim 11, wherein the plurality of census blocks are geographically closer to each other than other census blocks within the geographical unit that have not been aggregated.

15. The system of claim 14, wherein aggregating sensitive data records for the individuals into aggregation groups further comprises imputing nation-wide statistics to sensitive data records in the sensitive database that are not associated with a valid census block code using a third processing core of the plurality of processing cores.

17. The non-transitory computer-readable storage medium of claim 16, wherein the plurality of sensitive data records in the sensitive database corresponds to a plurality of individuals, wherein the grouping identifier comprises a census block that each of the plurality of individuals belongs to, and wherein aggregating the plurality of sensitive data records into aggregation groups is performed based on the census block.

18. The non-transitory computer-readable storage medium of claim 17, wherein aggregating the plurality of sensitive data records into aggregation groups comprises aggregating sensitive data records corresponding to the individuals in a census block into an aggregation group based on a number of individuals belonging to the census block is equal to or exceeding a threshold.

20. The non-transitory computer-readable storage medium of claim 17, wherein aggregating sensitive data records for the individuals into aggregation groups comprises imputing nation-wide statistics to sensitive data records in the sensitive database that are not associated with a valid census block code.